48 lines
1.2 KiB
Bash
Executable File
48 lines
1.2 KiB
Bash
Executable File
#!/bin/bash
|
|
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
|
|
|
|
# initialize the outputs for each dc
|
|
for dc in primary secondary; do
|
|
rm -rf "workdir/${dc}/tls"
|
|
mkdir -p "workdir/${dc}/tls"
|
|
done
|
|
|
|
container="consul-envoy-integ-tls-init--${CASE_NAME}"
|
|
|
|
scriptlet="
|
|
mkdir /out ;
|
|
cd /out ;
|
|
consul tls ca create ;
|
|
consul tls cert create -dc=primary -server -node=pri ;
|
|
consul tls cert create -dc=secondary -server -node=sec
|
|
"
|
|
|
|
docker rm -f "$container" &>/dev/null || true
|
|
docker run -i --net=none --name="$container" consul:local sh -c "${scriptlet}"
|
|
|
|
# primary
|
|
for f in \
|
|
consul-agent-ca.pem \
|
|
primary-server-consul-0-key.pem \
|
|
primary-server-consul-0.pem \
|
|
; do
|
|
docker cp "${container}:/out/$f" workdir/primary/tls
|
|
done
|
|
|
|
# secondary
|
|
for f in \
|
|
consul-agent-ca.pem \
|
|
secondary-server-consul-0-key.pem \
|
|
secondary-server-consul-0.pem \
|
|
; do
|
|
docker cp "${container}:/out/$f" workdir/secondary/tls
|
|
done
|
|
|
|
# Private keys have 600 perms but tests are run as another user
|
|
chmod 666 workdir/primary/tls/primary-server-consul-0-key.pem
|
|
chmod 666 workdir/secondary/tls/secondary-server-consul-0-key.pem
|
|
|
|
docker rm -f "$container" >/dev/null || true
|